The person responsible within the meaning of the Basic Data Protection Ordinance and other national data protection laws of the member states as well as other data protection regulations is:

Zytanien gGmbH
Ziegeleistr. 41
31275 Lehrte
Germany

Represented by:
Chief executive officer: Florian Ričko

Contact:
Phone: +49 1575 31275601
E-Mail:  

Register entry:
Registry court: Amtsgericht Hildesheim
Registry No.: HRB 205899

VAT ID:
Sales tax identification number according to §27a sales tax law: DE319439663

We only process personal data of our users, as far as this is necessary for the provision of a functional website as well as our contents and services. The processing of personal data of our users takes place regularly only after consent of the user. An exception shall apply in such cases in which prior consent has been obtained on the basis of actual data. Reasons is not possible and the processing of the data is permitted by legal regulations.

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Ordinance (DSGVO) serves as the legal basis. In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) DSGVO serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for processing.

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

Every time you visit our website, the hosting provider's system automatically collects data and information. from the computer system of the calling computer. The following data is collected and stored in a so-called server log file of the provider:

(1) Information about the browser type and version used
(2) The user's operating system
(3) The IP address of the user
(4) Date and time of access
(5) Websites from which the user's system reaches our website

This data is not stored together with other personal data of the user.

The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f DSGVO.

It is technically necessary to store the IP address in the provider's system, to enable the website to be delivered to the user's computer.

Data collected by the Provider that is necessary for the provision of the Website will be deleted, as soon as the session is over.
For security reasons (e.g. to investigate misuse or fraud), the log file information is used for the Maximum duration of 7 days stored and then deleted. We reserve the right, however, to store this data for a longer period of time if necessary and to forward it to an investigative authority of the Federal Republic of Germany, if we either become aware of concrete indications of an illegal use or if a legal action has been taken against us. the data has been ordered to be released.

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

Our website uses cookies, and only those that are technically required for operation. Cookies are data that are stored by the Internet browser on the user's computer system. Each cookie contains a characteristic character string that enables the browser to be uniquely identified when the website is called up again. The following data is transmitted to the browser:

¹⁾ to store the user's consent to the use of the above-mentioned cookies
²⁾ to save the language selection made by the user (German/English)
³⁾ for sending optimized image files tailored to the user's display size
⁴⁾ to register the user as a newsletter recipient
⁵⁾ for forum registration and use
⁶⁾ to register and use the ticket shop

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f DSGVO.

Some functions of our website cannot be offered or can only be offered to a limited extent without the use of the cookies mentioned above. It is therefore necessary for the browser to be recognized even after a page change and for the data stored in the cookies to be used. The data collected by the cookies mentioned above are not used to create usage profiles (tracking).

Cookies are stored on the user's computer. Thus, the user has full control over their use and can restrict the transmission of cookies by making appropriate changes in the settings of the Internet browser or disable cookies completely. Cookies that have already been saved can be deleted at any time. This can also be automated - e.g. when closing the browser.

You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input mask is transmitted to us. Specifically, this is the following user data:

(1) Firstname
(2) Lastname
(3) E-Mail address

In addition, the following data is collected upon registration:

(1) Date and time of registration
(2) State of registration (un-/confirmed)

While processing the data in the context of the registration process the user's consent will be obtained and a refernece is made to this privacy statement. In connection with data processing for the dispatch of newsletters, no data is passed on to third parties. The data will be used exclusively for sending the newsletter.

Legal basis for the processing of data after registration for the newsletter by the user is subject to the user's consent Art. 6 para. 1 lit. a DSGVO.

The collection of the e-mail address of the user serves the delivery of the newsletter. The collection of the user name serves the friendly salutation in the newsletter. The collection of other personal data within the registration process serves to prevent misuse of the services or the e-mail address used.

The above data will be stored for as long as the subscription to the newsletter is active, or has not been revoked by the user.

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose there is a corresponding link in every newsletter. Besides, there is a link on the newsletter registration page itself to unsubscribe. Thereby a revocation of the consent of the storage of the data collected during the registration process is also possible.

On our website, we offer users the opportunity to register for our services by entering personal data to register in a forum. The data is entered into an input mask and transmitted to us and saved. The following data is collected during the registration process:

(1) Firstname
(2) Lastname
(3) E-Mail address
(4) Password
(5) Username (nickname)
(6) Date of birth
(7) Gender

In addition, the following data is collected upon registration:

(1) Date and time of registration
(2) State of registration (un-/confirmed)

While processing the data in the context of the registration process the user's consent will be obtained and a reference is made to this privacy statement. No data will be passed on to third parties in connection with data processing in the forum. The data is used exclusively for the unique assignment of the forum posts created by the respective user.

Legal basis for the processing of the data after registration in the forum by the user is subject to the user's consent Art. 6 para. 1 lit. a DSGVO.

The collection of the user's e-mail address as part of the registration process serves this purpose, prevent misuse of the services or the e-mail address used. A registration of the user is necessary for the holding ready and the unambiguous assignment. of posts created by the user in the forum.

The above-mentioned data will remain stored until it is either deleted by user himself, or deleted by the forum administrator on request, e.g. because of demonstrably incorrect information.

A forum account can be deleted by the the user concerned at any time. For this purpose there is a corresponding link on the user's profile page. When deleting a user account, all user data created in the course of the forum membership will be deleted automatically as well. Furthermore the user may change or delete individual contributions created by him any time.

There is a contact form on our website which can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the input mask will be transmitted to us and stored. This data is:

(1) E-mail address
(2) Request

In addition, the following data is collected upon registration:

(1) Date and time of the request

For the processing of the data, the user's consent is obtained and reference is made to this privacy statement within the scope of the sending process. Alternatively, you can contact us via the e-mail addresses provided on the contact page. In this case, the user's personal data transmitted by e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.

The legal basis for processing the data in the contact form is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. Legal basis for the processing of data transmitted in the course of sending an e-mail, is Art. 6 para. 1 lit. f DSGVO. Is the e-mail contact aimed at concluding a contract? the additional legal basis for processing is Art. 6 para. 1 lit. b DSGVO.

The processing of the personal data from the input mask serves us only for the treatment of the establishment of contact. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the conversation with the user is finished. The conversation is ended when it can be deduced from the circumstances, that the facts in question have been finally clarified.

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. This can be done either in writing or by telephone at the address of the person responsible as specified under I.

A ticket shop is provided on our website where interested visitors can purchase festival tickets in advance for themselves. If a user takes advantage of this possibility, the data entered in the input mask will be transmitted to us and stored. This data is:

(1) First and last name of ticket recipient
(2) E-mail address of ticket recipient
(3) Number and type of tickets ordered

In addition, the following data is collected when ordering tickets:

(1) Date and time of order
(2) The number(s) of the tickets ordered

The user's consent is obtained for the processing of the data during the ordering process and reference is made to this data protection declaration. No data is passed on to third parties in connection with data processing in the ticket shop.

In case the user has given his or her consent, the legal basis for processing the data in the Ticket Shop is Art. 6 para. 1 lit. a DSGVO. A further legal basis for processing the data is Art. 6 para. 1 lit. b DSGVO, as processing is absolutely necessary to fulfil a contract of which the user concerned is a contracting party.

The processing of personal data serves exclusively to clearly assign the tickets ordered by the user, i.e. to check receipt of payment by the user and to send the tickets to the address(es) specified by the user. Furthermore, the stored personal data is used to validate the user's ticket(s) on entering the festival area.

The data will be deleted as soon as they are no longer required for the above-mentioned purposes of their collection.

In principle, the user has the possibility to revoke his consent to the processing of personal data at any time. However, he should be aware that under these circumstances it is no longer possible to verify the tickets presented, and the tickets are therefore considered invalid by the organizer. Furthermore, it is pointed out that §3 of the Ticket Shop's terms and conditions remains unaffected by the revocation of consent to the processing of personal data. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. This can be done either in writing or by telephone at the address of the person responsible as specified under I.

Maps of the service "OpenStreetMap" are included here by OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands B72 1JU, United Kingdom.
You can find OpenStreetMap Foundation's privacy statement on: https://wiki.osmfoundation.org/wiki/Privacy_Policy

Travel information of DB Vertrieb GmbH, Stephensonstraße 1, 60326 Frankfurt am Main are included here.
The provider uses several cookies of his own on this occasion.
You can find the privacy statement of Reiseauskunft der DB Vertrieb GmbH on: https://www.bahn.de/p/view/home/datenschutz/schutz.shtml

We strongly recommend that you read the above privacy policies BEFORE entering the page mentioned under VIII. 1. and VIII. 2. or in case of doubt not to call up these pages.

You can request information from the person responsible (see I.) as to whether personal data concerning you is processed on this website. If such processing has taken place, you can request information from the person responsible about the following information:

(1) the purposes for which the personal data is processed;
(2) the categories of personal data processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or are still being disclosed;
(4) the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
(5) the existence of a right to have your personal data corrected or deleted, a right to have the data processed restricted by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;

You also have the right to request information as to whether the personal data relating to you is transferred to a third country or an international organisation. Furthermore, you can demand information as to whether appropriate guarantees in accordance with Art. 46 DSGVO exist in the context of the transmissions being made.

You have a right of correction and/or completion by the person responsible, if the processed personal data concerning you is incorrect or incomplete. The person responsible shall make the correction without delay.

Under the following conditions, you may restrict the processing of your personal data:

(1) if you dispute the accuracy of the personal data concerning you for a period of time that enables the person responsible to check the accuracy of the personal data;
(2) the processing is unlawful and you refuse to delete the personal data and instead demand the restriction of the use of the personal data;
(3) the person responsible no longer needs the personal data for the purposes of processing, but you do need them to assert, exercise or defend legal claims, or
(4) if you have filed an objection against the processing pursuant to Art. 21 para. 1 DSGVO and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, except of the storage such data may only be processed with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the processing of the data has been restricted in accordance with the above-mentioned requirements, you will be informed by the person responsible before the restriction is lifted.

You can demand that the person responsible delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately, if one of the following reasons applies:

(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
(2) You revoke your consent, on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO, and there is no other legal basis for the processing.
(3) You file an objection against the processing pursuant to Art. 21 para. 1 DSGVO and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21 para. 2 DSGVO.
(4) The personal data concerning you have been processed unlawfully.
(5) The deletion of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
(6) The personal data concerning you have been collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO.

The right to cancellation does not exist insofar as the processing is necessary

(1) to exercise freedom of expression and information;
(2) for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the person responsible is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the person responsible;
(3) to assert, exercise or defend legal claims.

If you have exercised your right of rectification, cancellation or restriction of the processing against the person responsible, the person responsible is obliged to inform all other recipients to whom your personal data have been disclosed of this rectification or cancellation of the data or restriction of the processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients by the person responsible.

You have the right to access the personal data that you have provided to the person responsible, in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person responsible, in case

(1) processing is based on consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to Art. 6 para. 1 lit. b DSGVO and
(2) processing is carried out using automated methods.

In exercising this right, you also have the right to request that the personal data concerning you be disclosed directly to us. are transmitted by the aforementioned person responsible to another person, as far as this is technically feasible. The freedoms and rights of other persons must not be affected by this. The right of data transfer shall not apply to the processing of personal data necessary for the performance of a task which is in the public interest or in the exercise of which has been transferred to the person responsible.

You have the right to object at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f DSGVO. The person responsible will then no longer process the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or if the processing of the assertion, exercise or defense of legal claims.

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you are staying, working or living the alleged infringement, if you believe that the processing of personal data concerning you violates the DSGVO. The supervisory authority to which the complaint has been filed shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.